Privacy Policy

1. Who we are and what this policy covers

Contextual Creative Company, Inc.(the "Company", "we", "us", or "our") is a Delaware corporation. O Studio is a product of Contextual Creative Company, Inc.This Privacy Policy explains how we handle personal information when you visit tryo.studio, use O Studio Web Beta, use the controlled O Studio Desktop Beta, use public O Copilot, apply for a Beta, contact us, or participate in a separately agreed team or archive pilot (collectively, the "Services").

For the public site, public O Copilot, account administration, forms, and our own communications, the Company determines why and how personal information is used. A separately signed pilot agreement may assign different data-protection roles for the processing covered by that agreement.

2. Information we collect

Account information. Name, email, company, role, authentication and session identifiers, and related account-security information.

Forms and communications. The fields and message you submit through a contact, Beta, or pilot form, together with later correspondence. Current form delivery uses Resend and our Google/Gmail inbox.

Public O Copilot. Your prompt, the conversation context needed to answer it, the generated response, and technical request metadata. Public O Copilot accepts text, not customer media.

Hosted media and workflow data. If you intentionally submit media to Web Beta or a separately agreed pilot, we may process that media and related metadata, transcripts, outputs, and workflow receipts to provide the action you request. The marketing site and public O Copilot do not accept customer media.

Site, analytics, and security information. Page and feature events, performance and error information, browser and device information, and request metadata such as IP address and user agent when needed to deliver, secure, measure, or troubleshoot a hosted surface. Our custom analytics events are not intended to contain form values, free-text prompts, media, email addresses, or other sensitive text.

3. Desktop local workflows

For O Studio Desktop local workflows, source media and locally generated outputs remain on the supported Windows computer. Desktop projects, Library metadata, settings, and Local AI Packs also remain local unless you take a separate network action, such as requesting an AI Pack download.

This local-media boundary does not apply to O Studio Web, marketing forms, public O Copilot, site analytics, or a separately agreed online pilot.

4. How and why we use information

• Provide the Service, workflow, response, or AI inference you request.
• Operate accounts and keep hosted surfaces secure and reliable.
• Review and respond to Beta, pilot, partner, press, and investor inquiries.
• Measure performance, troubleshoot errors, prevent abuse, and enforce our Terms.
• Meet legal obligations and protect users, the Company, and others.
• Where applicable, we rely on a contract or steps requested before a contract, legitimate interests, consent, or a legal obligation.

5. AI processing and model training

We do not use customer media, private workspace content, form submissions, or O Copilot conversations to train O Studio generalized or shared AI models unless you first give separate affirmative consent. Service providers process information under their applicable terms, account settings, and instructions. OpenAI states that API data is not used to train its models by default unless the API customer opts in.

This does not prevent the processing needed to provide the result you request, detect abuse, or use aggregated or de-identified operational information that cannot reasonably identify you to improve security, reliability, and performance.

When you send a message to public O Copilot, we send your prompt, the conversation context needed to answer it, relevant reviewed public O Studio information, and a random session-scoped safety identifier to OpenAI. OpenAI processes the prompt and generated reply for model inference and safety screening. Do not submit customer media, credentials, confidential information, health or financial information, or other sensitive or regulated personal information.

6. When we disclose information

Depending on the surface or feature, current provider categories include:

• hosting, edge delivery, site analytics, and performance services such as Vercel;
• authentication services such as Clerk;
• database and object-storage services such as Neon and AWS;
• email delivery and inbox services such as Resend and Google/Gmail;
• error-monitoring services such as Sentry;
• AI-inference services such as OpenAI; and
• DNS and network-security services such as Cloudflare where configured.

We may also disclose information when you direct us to a connected service, when required by law, to protect rights or safety, or as part of a merger, financing, acquisition, or sale of all or part of the business. Providers may process information in the United States or other configured regions under their applicable contracts.

7. No sale or targeted advertising

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use personal information to serve targeted advertising. If this changes, we will update this Policy and provide any choice required by law before the change takes effect.

8. Retention

We use the following criteria and proven surface-specific limits:

• Desktop. You control local source files and outputs until you delete them. Normal uninstall does not delete them. Desktop structured logs keep at most five archives with seven-day archive retention. The local crash journal keeps at most 50 redacted records for 14 days. Projects, Library state, settings, and Local AI Packs may remain after normal uninstall until you explicitly remove app data.
• Public O Copilot.We do not intentionally persist message content in an O Studio application database. The active conversation is held in the browser while the page is open. Under OpenAI's default API controls, prompts and responses may be retained in abuse-monitoring logs for up to 30 days unless an approved different retention control applies, and may be retained longer when required by law or reasonably necessary to prevent harm.
• Forms and correspondence. We keep them as long as reasonably needed to respond, evaluate the request, maintain an active relationship, prevent abuse, resolve disputes, or meet legal obligations. A separately signed agreement may set additional terms.
• Web Beta and pilots. Account, project, media, output, and event data is kept while needed to provide the applicable Beta or pilot and under any enabled tenant policy or written agreement. Deletion may take additional time in backups and records retained for security, disputes, or law. We do not publish one universal Web retention period.
• Analytics, errors, security, and acceptance records. We keep them for the period needed to measure and secure the Services, investigate problems, preserve agreement evidence, and meet provider or legal requirements, then delete or aggregate them when reasonably possible.

9. Cookies and similar technologies

The marketing site uses Vercel Web Analytics for anonymized, cookie-free page and interaction measurement and Vercel Speed Insights for anonymous performance data points. These tools are not advertising trackers and are not used for targeted advertising.

Authenticated hosted surfaces may use cookies or browser storage that are necessary for authentication, session security, and requested features.

10. International processing

The Company is organized in Delaware, United States, and our providers may process information in the United States or other configured regions under their applicable terms and settings. Privacy protections may differ between jurisdictions. We do not promise a specific storage or processing region unless it is confirmed for the selected surface or a written agreement.

11. Security

We use reasonable technical and organizational measures appropriate to the current Service. No method of storage or transmission is completely secure. Review the current security and privacy boundaries before choosing a surface.

12. Your privacy rights

Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information; restrict or object to processing; withdraw consent; or appeal a decision. Email tarifsayed7@gmail.com.

We may verify your identity and will respond within the period required by applicable law. We will not discriminate against you for exercising an applicable privacy right.

13. Age requirement

O Studio is intended only for people who are at least 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 submitted information, email tarifsayed7@gmail.com.

14. Changes to this policy

We may update this Privacy Policy as the Services and legal requirements change. We will post the updated date and provide additional notice through the site, the updates page, email, or an in-product message when appropriate. We will request affirmative acceptance when applicable law requires it.

15. Contact

Privacy and legal requests: tarifsayed7@gmail.com

The registered office is the Company's registered office in Delaware. It is not presented as a customer-support or privacy-response office; use the email above for those requests.